Top Cloud Security Engineer Jobs

Lead cloud security design and implementation across AWS, Azure, and GCP. Build and automate cloud infrastructure with IaC and CI/CD, establish governance, identity, networking, security controls, and monitoring. Drive cloud modernization, integrations, developer enablement, and incident resolution. Partner with security, SRE, platform, and compliance teams to support audits and shape cloud strategy and standards.

Develop and evaluate cloud security architectures for Intelligence Community systems. Assess security documentation, compliance, risk thresholds, software assurance, and RMF requirements across on-premises, cloud, and hybrid environments. Support validation, assessment, accreditation, and troubleshooting activities; recommend security tools and capabilities; and collaborate with clients and technical teams in an Agile environment.

The Senior Cloud Security Engineer protects NYC agency systems by assessing cloud and on-premises security, identity and access management, network defenses, email filtering, and endpoint protection. The role ensures compliance with cybersecurity policies, guides security architecture and remediation, operates defensive technologies, coordinates technical projects, communicates with stakeholders, and documents deployment plans. Work occurs within a 24/7 operation and may require nights, evenings, or weekends.

The Cloud Security Engineer will design, implement, and maintain cloud-based security services, ensuring consistent integration of security in DevOps practices and collaborating on security compliance and vulnerability management.

Own and improve the security posture of Robinhood’s AWS cloud infrastructure. Build and operate foundational security controls, automation, safe defaults, and developer-friendly security capabilities. Secure enterprise applications using AWS services, Terraform, and Golang or Python while applying least-privilege principles, AWS Well-Architected practices, and CIS Benchmarks.

Deploys and manages cloud, virtualized, physical network, and cybersecurity infrastructure, including IDS/IPS, firewalls, SIEM, SOAR, and EDR. Automates provisioning, patching, and reporting with PowerShell, Ansible, Terraform, and REST APIs. Monitors and tunes HCI clusters, conducts disaster-recovery drills, applies STIGs, investigates incidents, maintains runbooks, and mentors junior staff. Requires Windows and Linux administration, networking, infrastructure-as-code, backup and recovery, capacity planning, and troubleshooting expertise in a cleared DoD environment.

Design, implement, and automate scalable cloud security solutions and baselines across AWS/Azure/GCP. Build guardrails, IAM, detection/monitoring, configuration management, and data protection using IaC (Terraform) and everything-as-code. Collaborate with Product Engineering and security teams, produce technical documentation, and operationalize security tooling.

Detects, investigates, responds to, and remediates cyber threats across Azure, AWS, GCP, Microsoft 365, and SaaS environments. Builds and tunes KQL and Sigma detections, leads incident response, hardens cloud environments, investigates anomalous activity, and develops automation using scripts, Logic Apps, and AI-assisted tools. Produces operational and after-action reporting while staying current on emerging cloud attack techniques.

Develop Go-based microservices and REST APIs for CrowdStrike's Cloud Security Posture Management platform. Own end-to-end delivery, follow engineering best practices, use event-driven workflows (Kafka), and store data in Cassandra/Elasticsearch/Postgres. Operate production services (on-call), deploy containers in Kubernetes with Helm, and work with cloud providers and infrastructure-as-code tools to secure cloud workloads.

Lead design and deliver multi-cloud security and continuous compliance solutions across Azure/AWS/GCP. Build automated preventive/detective/corrective controls, implement audit-ready observability, author production code (Python/Go, with Java integrations), optimize CI/CD (Jenkins), operate Kubernetes/workflow orchestration, integrate enterprise systems, and drive secure, resilient engineering and responsible AI-assisted development practices.

Operate and improve cloud security controls across AWS, Azure, Kubernetes, and hybrid environments. Investigate vulnerabilities, misconfigurations, identity risks, and exposure paths using CSPM/CNAPP platforms; prioritize findings and drive remediation. Build Python- and API-based security tooling, dashboards, integrations, automation, and guardrails supported by infrastructure as code and CI/CD. Secure Kubernetes workloads, conduct architecture and pipeline reviews, investigate incidents, and collaborate with Cloud Operations, SRE, and engineering teams.

Design, implement, and maintain cloud security controls across Azure, hybrid, and on-prem environments. Manage IAM, RBAC, PIM, and CI/CD security; monitor posture with Sentinel and Defender; run vulnerability and risk assessments; support incident response and remediation; enforce policies aligned to NIST, SOC 2, and CIS; drive data protection.

Lead design, implementation, automation, and operation of enterprise Okta identity services. Drive application onboarding, federation, lifecycle management, resiliency, monitoring, incident response, governance, and platform automation while mentoring engineers and improving security posture.

Design, implement, and maintain scalable cloud security controls for Vercel's platform. Harden infrastructure using infrastructure-as-code and policy enforcement, secure CI/CD pipelines, perform threat modeling and risk analysis, improve monitoring and incident response, and build platform-level security tooling in collaboration with platform and infrastructure teams.

Lead cloud security initiatives across AWS, Azure, and GCP by partnering with SRE, architecture, and app teams. Implement secure-by-design controls, monitor and improve cloud posture, support compliance, threat detection, incident response and forensics, mentor junior engineers, and integrate new security technologies into networking cloud environments.

Own and build Grow Therapy's data security infrastructure: automated data classification, field-level masking/tokenization, encryption and key management, secure data connectors to AI tooling, and access controls. Define a multi-year vision, implement pipelines and services, and partner across Data, Engineering, and Detection & Response to make secure-by-default the company standard.

Lead the maturation of Ontic’s AWS cloud security program by designing and automating security controls, integrating security into CI/CD workflows, improving cloud monitoring and detection, and developing continuous evidence collection for FedRAMP and other compliance initiatives. Partner with Engineering and DevOps teams on secure architecture, cloud best practices, regulated SaaS environments, and measurable security improvements.

Protect and harden Wolters Kluwer's centralized GenAI platform (FAB) by implementing cloud-native security controls, IAM and least-privilege practices, DevSecOps automation, vulnerability management, security monitoring, and compliance support (SOC 2, HIPAA). Collaborate with engineering and audit teams to integrate security into CI/CD pipelines, triage findings, and support incident response and audit readiness.

Design and enforce cloud security best practices, build automated monitoring and remediation tools, integrate AppSec into CI/CD, collaborate with incident response and development teams, research security technologies and prototypes, and manage vulnerability and compliance processes across cloud environments.

Protect and harden Motorola Solutions' multi-cloud (AWS/Azure/GCP) SaaS platform by deploying automated security capabilities (CNAPP, WAF, vulnerability detection), building security automation and CI/CD integrations, supporting compliance (NIST, FedRAMP, ISO, SOC2), and collaborating on detection, incident response, and continuous security improvements.

Lead cloud security engineering to implement and scale cloud-native security controls across AWS/Azure/GCP. Drive CSPM/CNAPP posture management (Wiz, native policies), policy-as-code, IaC automation, container/Kubernetes and API security, and AI-driven security capabilities. Partner with engineering, DevSecOps, IAM, governance, and audit teams to translate controls into repeatable patterns, improve remediation workflows, and support regulatory and risk objectives.

Design and scale secure AWS environments, build and maintain Terraform IaC and pipelines, lead security assessments and incident response, integrate security into CI/CD, define IAM/encryption/network controls, monitor and investigate cloud threats, and coach teams on cloud security best practices.

Design, implement, and maintain cloud security controls across Microsoft Azure and Microsoft 365. Configure and operate Defender suite, Sentinel, and logging; assess AKS and container workloads; perform vulnerability management and incident response; collaborate with cloud and compliance teams; support audits and customer security requests; develop documentation, automation, and monitoring to improve security posture.

Design and implement secure AWS architectures, manage IAM and AWS security services (GuardDuty, Security Hub, Inspector, Macie, WAF), build IaC security controls (Terraform, CDK Python), perform threat modeling and vulnerability remediation, implement logging/monitoring (CloudTrail, CloudWatch, SIEM), support incident response, automate compliance checks, and collaborate with DevOps to embed security in CI/CD pipelines.

Lead design and implementation of cloud security controls across AWS/GCP, Kubernetes, and serverless environments. Harden infrastructure, automate IAM and secrets management, integrate security scanning into CI/CD, operationalize vulnerability management and threat modeling, and partner with engineering to embed DevSecOps practices across AI-driven workflows.